Penetration Tester: AI-Driven Security Testing Across Cloud

CommBank; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

CommBank is seeking a Penetration Tester to deliver hands-on testing across cloud, networks, SaaS, and enterprise platforms. You will identify and validate vulnerabilities, demonstrate potential business impact, and provide remediation guidance within a high-energy cybersecurity team.

The role values curiosity, collaboration, and knowledge-sharing as the threat landscape evolves, including AI-powered testing workflows.

Qualifications

• Hands-on security testing capability across cloud, networks, SaaS and web applications.
• Ability to explain technical findings clearly and recommend remediation actions.
• Experience with AI-enabled testing or using AI to improve workflows is advantageous.
• Relevant security certifications are advantageous.

Responsibilities

• Deliver penetration testing across cloud, SaaS, infrastructure, networks, web applications and enterprise platforms.
• Help define the scope, approach and appropriate level of rigour for assigned testing engagements.
• Identify and safely validate vulnerabilities, demonstrating technical risk and potential business impact.
• Produce clear, practical reports that help technology teams understand findings and prioritise remediation.
• Collaborate with engineers, platform teams, service owners and other security testing chapters.
• Contribute to improvements in testing methods, tooling, automation and team practices.
• Explore responsible uses of AI to support activities such as research, proof-of-concept scripting, analysis and testing workflows.

Skills

Penetration testing

Cloud security testing

Network security testing

SaaS testing

Web applications testing

Tools

Kali Linux

Burp Suite

Metasploit

Job description

CommBank is seeking a Penetration Tester to deliver hands-on testing across cloud, networks, SaaS, and enterprise platforms. You will identify and validate vulnerabilities, demonstrate potential business impact, and provide remediation guidance within a high-energy cybersecurity team.

The role values curiosity, collaboration, and knowledge-sharing as the threat landscape evolves, including AI-powered testing workflows.